23 lines
1.3 KiB
Markdown
23 lines
1.3 KiB
Markdown
|
# Harden Enforcement Layers Implementation
|
||
|
|
|
||
|
|
## Summary
|
||
|
|
Added pre-push hook, install-hooks.sh, plugin auto-registration, and prompt pre-edit checks to harden all enforcement layers.
|
||
|
|
|
||
|
|
## Changes
|
||
|
|
|
||
|
|
### New Files
|
||
|
|
- `scripts/git-hooks/pre-push` — Blocks pushes when no task is in edit-allowed phase; catches `--no-verify` bypasses
|
||
|
|
- `scripts/install-hooks.sh` — Installs pre-commit + pre-push hooks into a project
|
||
|
|
- `scripts/register-guards.sh` — Auto-detects opencode/pi dev harnesses and registers guard plugins
|
||
|
|
|
||
|
|
### Modified Files
|
||
|
|
- `contracts/harness-integration.md` — Updated to 4-layer enforcement model (added pre-push)
|
||
|
|
- `prompts/doc_review.md` — Added pre-edit check section (MANDATORY)
|
||
|
|
- `prompts/implement.md` — Added pre-edit check section (MANDATORY)
|
||
|
|
- `prompts/orchestrate.md` — Added task creation section with clock-touch instructions
|
||
|
|
- `scripts/install.sh` — Calls register-guards.sh post-install; updated hook installation docs
|
||
|
|
- `scripts/update.sh` — Calls register-guards.sh; auto-installs hooks in current project
|
||
|
|
- `scripts/upgrade.sh` — Installs both pre-commit and pre-push hooks (previously pre-commit only)
|
||
|
|
- `system-prompt.md` — Added hook verification step and task-required-before-edits rule
|
||
|
|
- `scripts/git-hooks/pre-commit` — Cleaned up error messages (removed bypass/upgrade instructions)
|